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MEMORANDUM TO THE DEPUTY MINISTER AND THE ASSOCIATE DEPUTY MINISTER 
DEPARTMENTAL PLAN FOR SERVICE AND DIGITAL 2022-2025 


FOR APPROVAL 


SUMMARY 


The purpose of this memorandum is to seek your approval of Immigration, Refugees 
and Citizenship Canada’s (IRCC) 2022-2025 Departmental Plan for Service and Digital 
(DPSD). 


The DPSD document, with elements completed by Finance, Information Management 
(IM), Information Technology (IT), Cyber Security and Service Delivery, shows IRCC 


alignment to themes in the Policy on Service and Digital and the Treasury Board 
Secretariat (TBS) Digital Operations Strategic Plan. 


This document is an annual mandatory TBS reporting element, due by April 1. 


We recommend you approve IRCC’s DPSD by checking the ‘I concur’ box and signing 
Annex A (Section 1, Approval) by April 1 to ensure timely transmission to TBS. 


BACKGROUND: 


e This annual reporting task is in its second year of TBS’s new approach to integrated planning 
requirements under the Policy on Service and Digital. TBS’s overall objective is to improve 
integrated planning for these areas within and across departments, and gather this information 
for planning purposes, as well as Management Action Framework (MAF) assessment data 
points. 


e TBS has changed the online IT Plan reporting tool used by departments. A new enterprise 
project management online reporting tool (GC EPM) is being phased in; IRCC is in the process 
of transitioning to this product. 
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CURRENT STATUS: 


e The reporting document has sections in an Excel spreadsheet that provide TBS with 
information from most departments and agencies in a consistent manner (see Annex A). 
Sections are: Instructions; Approvals, Key Contacts, Service Improvement Priorities, Finance 
and FTEs related to IT, Application Modernization and Data Centre Decommissioning, 
Departmental Profiles, Departmental Provisions, Plans for Consumption Change, Cyber Plans, 
IM, and Accessibility. A summary of each section is provided in Annex B. 


e The Operations Sector completed Section 3 — Service Improvement Priorities. IRCC’s ongoing 
IT prioritization discussions informs this work, and initiatives approved to proceed by ExCom 
in December 2021 have been included. 

e The timely signature of the DPSD will likely be an indicator in the next MAF cycle. 

e The completeness and the quality of information in the DPSD, and the potential cross 
referencing of data in this document and other documents submitted to TBS, such as the IT 


Expenditure Report, will likely contribute to future IRCC MAF results. 


CONSULTATIONS: 

e Implicated work units within IRCC’s Transformation and Digital Solutions Sector (TDSS), 
Finance, Administration, Security and Accommodations, and Operations have contributed to 
the completed sections of the reporting document for TBS, in consultation with numerous areas 
of the Department. 

RECOMMENDATIONS: 


e We recommend you approve the IRCC DPSD by checking the ‘I concur’ box and digitally 
signing Annex A (Section 1, Approval) by April 1. 


NEXT STEPS: 


e Following your approval, TDSS will submit the 2022-2025 DPSD to TBS. 
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e We anticipate that TBS will present regular updates across all departments on these key DPSD 
elements at the Chief Information Officer Council as well as the DM and ADM Committees on 
Service and Enterprise Planning. 


Rina Lorello 
Assistant Deputy Minister, TDSS and 
Chief Information Officer 


| | I concur L | I concur 
[_] Ido not concur | | I do not concur 
Caroline Xavier Catrina Tapley 
Associate Deputy Minister Deputy Minister 


Scott Jones 
Federal Lead, Proof of Vaccine Credentials 
Associate Deputy Minister 


Annexes (2): 
A: DPSD Data Capture 
B: Summary of DPSD 
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Rina Lorello Daniel Mills 
Name of the Departmental Chief Information Officer Name of the Departmental Service Official 


Francois Nadon 
Name of Departmental Cyber Security Official 


7 approve the Departmental Plan for Service and Digital. 


Digitally signed by Jones, 
Scott 


| Jones, SCOtt bate: 2022.03.31 


16:06:01 -04'00' 


Deputy Minister Date 
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Rina Lorello 


Sandra Minatel 
Francois Nadon 
Umit Kiziltan 
Rina Lorello 


Sylvain Beauchamp 
Salena Brickey 


. IT Planning Lead 
: Kyle Woodtke 


‘Aneta Klebucki 


. IT Expenditure Report Lead 


Dept. Accessibility Lead 


Judite Neves udite.Neves@cic.gc.ca 
Jason Choueiri ason.Choueiri@cic.gc.ca 
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Blair Haddock Blair. Haddock@cic.gc.ca 
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Service Improvement Initiative 


Brief Description 


To ensure that IRCC is meeting its privacy obligations 
in terms of collection and retention of biometric 
information once a client becomes a Canadian citizen, 
and to ensure compliance with policy and statutory 
frameworks around data retention. 


Citizenship (CIT) 
Biometrics Purge 


To reformat the ATIP report generated by GCMS to 
provide a more targeted response to client ATIP 
requests as outlined in IRCC’s response to the Office 
of the Information Commissioner of Canada (OIC) 


Access to Information 
and Privacy (ATIP) 
GCMS Report Review 


Procure and deploy a new solution for all Canadian 
travel documents across the domestic and abroad 
passport networks, 


ePassport Next 
Generation (ePPT-NG) 


Provide clients with more clarity on the reason(s) for 
their TR refusal by 
updating the refusal letter template and adding a new 
label for 
GCMS notes. 


Refusal Letter (ATIP) 


Launched in 2017 to support Atlantic Provinces in 
meeting specific labour market demands and giving 
businesses the ability to fill job vacancies quickly 
using permanent immigration programs. It was 
originally designed as a three-year pilot, but was later 
extended to a five year pilot. In December 2019, the 
Prime Minister instructed the Department to make 
the AIP a permanent program. 


Atlantic Immigration 
Program 


VAC Journey Lab 
(formerly VAC 
Application Intake 
Digitization Project) 


Develop and implement tools in support of changes 
to immigration consultants legislation, to allow new, 
more efficient means of detecting wrongdoing, 
conducting regulatory investigations, and managing 
the new administrative penalties component. 


Immigration and 
Citizenship Consultants 
(ICC) Project 


Resettlement online service made up of: 1) UNHCR 
system connectivity, 2) IOM interoperability, 3) 
Resettlement Portal 
UNHCR (ProGes) system-to-system (GCMS) 
connectivity for REF OVS (GAR) referrals 


Multi-year Level Plan — 
Work Package (MYLP 
WP) 14 - Phase 1, Phase 
2 


IRM 


ICB 


CPPB 


CEB 


IPG - SPEC 


IN-VAC 


IPG 


RASO 


Chris Gregory 


Chris Bry, Lacey Ann Foster 


Kerstin Virtanen 


Eric St-Laurent 


Bogdan Sultana 


Amrita Jhutti 


Laurie Pilsworth; 
Tammy-Lynn Romain 


Paul Desautels; 
Marcie Dougherty; 
Sara Shahsiah 


Applicable Fiscal Years of : 
initiative $ 


2021-22 FY 
2022-23 FY 


2021-22 FY 
2022-23 FY 


2019-20 FY 
2020-21 FY 
2022-23 FY 
2023-24 FY 


2020-21 FY; 
2021-22 FY; 
2022-23 FY 


2021-22 FY; 
2022-23 FY; 
and ongoing 


2020-21 FY; 
2021-22 FY; 
2022-23 FY; 
2023-24 FY 


2018-19 FY; 
2019-20 FY; 
2020-21 FY; 
2021-22 FY; 
2022-23 FY; 
2023-24 FY 


-Improvement Driver 


Select applicable Select all applicable 


Privacy; 


On Track 
ee Other: Charter Obligations 


Legislation; 
On Track Client Feedback; 
Service Standards 


Modernization; 
Digitalization 


Delayed Client Feedback 


Legislation; 
Modernization; 
On Track Digitization; 
Other: Transition from Pilot to 
Permanent 


Modernization; 
Digitization; 
On Track Legislation; 
Security; 
Other (Program Integrity) 


Digitization; 
Modernization; 
Delayed Client Feedback; 
Privacy; 
Online Service Availability 


s.21(1)(b) 
s.21(1)(c) 


implicated Services 
{list all applicable services and IDs from the Service Inventory} 


Service: Name(s} ; ; Service IDs 


Multiple Services N/A Multiple Services 


Access to Information; N/A 1514; 

Access to Privacy Request 1516 
Multiple Services N/A Multiple Services 
Multiple Services N/A Multiple Services 


Listed as a mandate commitment to 
spread benefits of immigration to 
different regions 


Multiple Services Multiple Services 


Multiple Services Potential delays due to IT capacities. Multiple Services 


Multiple Services N/A Multiple Services 


Applicable Online Service Client Interaction Points. 


Select all applicable 


N/A 


N/A 


N/A 


Online Decision 


Online Account Registration and Enrolment; 
Online Authentication; 
Online Application; 
Online Decision; 
Online Issuance; 
Online Issue Resolution and Feedback 


N/A 


Online Account Registration and Enrollment; 
Online Application; 
Online Decision; 
Online Issuance; 
Online Issue Resolution and Feedback 
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GCIT Investment ID{s}* 


(SSC Partners Only) 


TBD 


N/A 


9829 


TBD 


8075 


27672 


TBD 
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Immigration, Réfugiés 
et Citoyenneté Canada 


The online test needs a significant amount of features 
including enhanced reporting, automated reminders, 
Online Citizenship test analytics, portal updates, and ability to easily 
Tests change questions all of which will improve client 
service, decrease processing times, improve decision 
making and save costs. 


Provide online case status update to applicants for 
Permanent Residence - Family Class Priority (PR FC). 
PR FC Digital Tracker - When PR FC applicants cannot access meaningful 


Innovation Lab case status information online, they call or email IRCC 
to get case status information or they file an ATIP 
request. 


The creation of an Asylum online application and a 
PRRA online application with GCMS integration, 


Asylum 
Interoperability Project 
(AIP) — WP 6.1 
Redesign MyAccount or develop a new digital solution 
My Account to support clients in applying under any IRCC 


programs. 


TRV. Chinook 1.5 - To automate manual functions into Chinook 1.5 to 
Journey Lab stabilize the tool and increase data security 


RPA will allow IRCC to automate repetitive porcesses 
at a fraction of the previous cost and time. It non- 
intrusive in nature and leverages the existing 
infrastructure without causing disruption to 
underlying legacy systems. 


RPA in the Cloud - 
Innovation Lab 


CBSA-IRCC 
Work Permit (WP) 
Enhance Temporary To release work permit portion as the final element of 
Residence (TR) eAPP the TR eApp. 


Digital Capture Pilot 


CPPB 


CEB 


RASO 


CEB 


IPG = Digital Journey Lab 


DSB 


CDO 


IPG 


IPG - Digital Journey Lab 


Corinna Clement / Shawn Riel 


Jérôme Foldes-Busque 


David Schembri 


Jérôme Foldes-Busque 


Sakina Masmoudi; 
Benjamin Pittana 


Allain Lauzon; Gabrielle Ring 


Sebastien Fleurant 


Benjamin Pittana 


Benjamin Pittana; 
Sakina Masmoudi 


2020-21 FY; 
2021-22 FY; 
2022-23 FY 


2021-22 FY 


2021-22 FY 
2022-23 FY 


2021-22 FY; 
2022-23 FY; 
2023-24 FY 


2021-22 FY; 
2022-23 FY; 


2021-22 FY; 
2022-23 FY; 
and ongoing 


2021-22 FY 
2022-23 FY 


2021-22 FY; 
2022-23 FY 


2021-22 FY; 
2022-23 FY 


On Track 


Complete 


On Track 


Delayed 


On Track 


On Track 


On Track 


Delayed 


On Track 


COVID-19; 
Accessibility; 
Digitialization 


Client Feedback; 
Online Service Availability; 
Other: Transparency 


Online Service Availability 


Digitalization; 
Online Service Availability 


Data; 
Emerging Technologies 


Modernization; 
Emerging Technologies 


Modernization; 
Data 


Online Service Availability 


Client Feedback; 
Digitalization 


The online test solution MVP1 is fully 
operational. MVP2 (Dec 2021) 
introduced support for multiple test 
versions, new test question categories 
and logic, login process 
improvements, static content 
configurability, administrative portal 
upgrades, archiving functionality and 
improved reporting. Remaining scope 
to enable dual testing once the new 
citizenship guide has launched. 


Multiple Services 


Family Class Priority - Application 


L hed Febr 2022 
for Permanent Residence Pree écoute 


This AIP work package (WP) 6.1 is for 


In-Canada Asylum Claim a : she 
Online Refugee Claim Applications 


Multiple Services N/A 


Chinook 1.5 includes TRV Journey Lab 


Multiple Services 
p Chinook 


Phase 1 to be completed end of 2021- 


Multiple Services 
22 FY, Phase 2 for 2022-23 FY 


Multiple Services N/A 


Multiple Services N/A 


Multiple Services Also known as "TR eAPP Submit Docs” 


Multiple Services 


1442 


1457 


Multiple Services 


Multiple Services 


Multiple Services 


Multiple Services 


Multiple Services 


Multiple Services 


s.14(a) 
s.16(2) 
s.21(1)(b) 


Online Account Registration and Enrolment; 
Online Authentication; 
Online Application; 
Online Decision; 
Online Issuance; 
Online Issue Resolution and Feedback 


Online Account Registration and Enrolment; 
Online Authentication; 
Online Application; 
Online Decision; 
Online Issue Resolution and Feedback 


Online Account Registration and Enrolment; 
Online Authentication; 
Online Application; 
Online Decision; 
Online Issuance; 
Online Issue Resolution and Feedback 


Online Account Registration and Enrolment 


N/A 


N/A 


N/A 


Online Account Registration and Enrolment; 
Online Authentication; 
Online Application; 
Online Decision; 
Online Issuance; 
Online Issue Resolution and Feedback 


Online Account Registration and Enrolment; 
Online Authentication; 
Online Application; 
Online Decision; 
Online Issuance; 
Online Issue Resolution and Feedback 
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8074 


TBD 


28541 


TBD 


N/A 


N/A 


N/A 


TBD 


TBD 
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Rep Portal is now live with initial 
minimal viable product (MVP). PR-DIP 
is iterative and pending updates 


Online Account Registration and Enrolment; 
Online Authentication; TBD 
Online Application 


PR DIP - IMM Reps Update the Permanent Residence (PR) Digital Intake 
z P P i igrati ntati = 
Partal/Access ortal (DIP) so that immigration represe tatives PG pramiti Wahab 2021-22 FY On Track 
Innovation Lab can create an account, upload documents, digitally 2022-23 FY 
sign and submit an application on behalf of a client. 


Online Service Availability Multiple Services Multiple Services 


Develop enhancements to the Permanent Residence 
(PR) Digital Intake Portal (DIP) and the PR 
Confirmation function, so that clients and 


PR DIP — Add. Funct. 


Online Account Registration and Enrolment 
(Confirmation Portal) - 


Promiti Wahab; 2021-22 FY Online Authentication 


Client Feedback; 
IPG On Track IPE CEE eee 


PR DIP is iterative and pending 


; ; . ; ue Multiple Services Multiple Services : Re TBD 
Innovation Lab caseworkers are able to use the tools seamlessly, David Leblanc 2022-23 FY Online Service Availability p updates p Online Application 
resulting in improved user experience and faster 
intake processing. 
Development of Robotic Process Automation 
CSC RPA Pilot - j ; s i : i j i 
i (attended RPA) to increase efficiency in addressing 7 . 7 . Pilot project completed in November . 3 
Innovation Lab B an | CEB Karine Lalancette 2021-22 FY Completed Emerging Technologies Client Support Centre 2238 Online Issue Resolution and Feedback N/A 
non-complex and repetitive administrative tasks 2021 
performed by Client Support Centre (CSC) agents. 
The system will be named : 
Stakeholder Engagement 
The Dedicated Service Channel (DSC) requires a gag : 
z i es Management System (SEMS). It is 
Dedicated Service flexible case management system for high volume Modernization; h f 4: 
5 7 À ae 2021-22 FY 7 n R being built for scalability across the x ; 
Channel (DSC) stakeholder interactions to deliver on the mandate DN Jean-Philippe Lafond On Track Client Feedback; Multiple Services 5 Multiple Services N/A N/A 
à : : g , 2022-23 FY Department to fill the need of a 
negotiated with the Atlantic provinces for the Atlantic Data 


Stakeholder Management system 
until an Enterprise level one can be 
implemented through DPM 


Immigration Program (AIP). 


(Phase 1) 
2019-20 FY; 
HANS eae? i , DSB - Phase 1 (Stabilize) and 2 
The “Digital Platform Modernization” project aims to 3 2020-21 FY; 
k ; ; (Standardize) 
stabilize and standardize our current information : 2021-22 FY; Pane 
, | (Phase 1 and 2) - Nancy Violette- Modernization; 7 . ¥ 
technology system, and to build the foundation for a , En Online Account Registration and Enrolment; 
ae Fehr, Yanick Larouche; Leina Accessibility; ? vas 
new digital platform for the Global Case Management Z ; (Phase 2) . ate Online Authentication; 
ee 7 7 Keighan; Gary Finn ; Real Time Application Status; i AA Phase 1: 00006400 
Digital Platform System used all over the world by Immigration, 2021-22 FY; at T L X à ; Online Application; 
rares à. à DSB On Track Legislation; Multiple Services N/A Multiple Services a Phase 2: 00006400 
Modernization Refugees and Citizenship Canada (IRCC), the Canada on 2022-23 FY; y Online Decision; 
i , Modernization Sector Security; 7 Phase 3: 00006404 
Border Services Agency and other partner agencies Online Issuance; 
g 7 Phase 3 (Ehance) Data; $ $ 
for managing the status of visitors, temporary (Phase 3) À r Online Issue Resolution and Feedback 
, i 7 Service Reviews 
residents and immigrants. Re 2022-23 FY 
(Phase 3) Jason Choueiri, Alanna 
: 2023-24 FY 
MacDougall, Claude Bazinet 
2024-25 FY 
2025-26 FY 
Ability for Minor 5(1) and Minor 5(2) applicants as 
Citizenship Digital well as group applicants to utilize online Citizenship Connie latauro / Kristy Cook; 2020-21 FY; Accessibili Citizenship Grant - Application for Online Account Registration and Enrolment; 
Intake — eApp grant e-app to apply electronically and integrate the Transformation Branch / CPPB Corrina Clement / Shawn Riel; 2021-22 FY Delayed Onine Sanico abi Citizenship under Sections 5(1), N/A 1482 Online Authentication; TBD 
Citizenship Grant physical presence calculator in the online CITO002 - Sakina Masmoudi 2022-23 FY Y 5(2), 5(4) of the Citizenship Act Online Application 
Adult 5(1) application. 
Passport Program 
Ability to improve efficiency, strengthen security, and : . 2021-22 FY; uns 
Modernization Initiative | y p En Y 8 à Y CPPB Corrina Clement / Shawn Riel À On Track Modernization Issuance of a Regular Passport N/A 1491 N/A 8157 
increase Canadians’ access to passport services. 2022-23 FY 


(PPMI) 
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The creation of an Asylum online application and a 
PRRA online application with GCMS integration 
Asylum Interoperability 
Project (AIP) 


Development of new GCS functionality will provide 


Grants and additional efficiencies and facilitate the effective 
Contributions System management of increased funding and 
(GCS) responsiveness to new IRCC grant and contribution 
programing. 


Create Rapid Response Add RROC office to all current and future immigration 
Operations Centre applications and create a tool to add secondary 


(RROC) Office offices in bulk. 
Resettlement Complete intake for and schedule for release all 
Assistance Program requests deemed to be critical for the effective 


(RAP)-Income Support functioning of the RAP-IS module. 


Interim Federal Health 


Program - Claims Procure a new service provider and modernize IFHP 
Administration claims administration business processes to deliver 
Modernization Project enhanced services for providers and beneficiaries. 
(IFHP-CAMP) 


Ability to digitize the Citizenship Certificate so that it 
Electronic Citizenship can be issued in an electronic format. Ability to 
Certificate review and adjust workflow for a dual paper and 
digital citenship certificate processing. 


RASO 


SN 


OPPB 


SN 


MHB 


CPPB 


Debbie Lagace; Rubi Laura-Lopez, 


David Schembri 


Tal Elharrar 


Tal Elharrar 


Phil Dussault 


Corrina Clement, Myriam Lamb 


2019-20 FY; 
2020-21 FY; 
2021-22 FY; 
2022-23 FY 


2021-22 FY and ongoing 


2021-22 FY; 
2022-23 FY 


2022-23 FY; 
2023-24 FY 


2021-22 FY 


2021-22 FY; 
2022-23 FY; 
2023-24 FY 


Delayed 


On Track 


On Track 


On Track 


On Track 


Delayed 


Online Service Availability; 
Accessibility 


Modernization; 
Client Feedback 


Modernization; 
Digitalization 


Accessibility 


Modernization; 
Online Service Availability 
Service Standards 


Modernization; 
Emerging Technologies; 
Online Service Availability 


Multiple Services N/A 


Settlement Program Transfer 
Payments; 
N/A 
Resettlement Assistance Program / 
Transfer Payments: Contributions 
to Service Provider Organizations 


Multiple Services Partially implemented for R26 


Resettlement Assistance Program 
Transfer Payments: Income N/A 
Support to Refugees in Canada 


Interim Federal Health: 
Reimbursements to Health Care 
Professionals; 

Provision of Interim Federal Health 
Program coverage to eligible 
beneficiaries 


N/A 


E-certificates initiative to be shifted 
to a phased implementation with pilot 
projects for both citizenship grants 
Citizenship Grant - Application for and citizenship proofs. Includes a 
Citizenship under Sections 5(1), | GCMS and non-GCMS components to 
5(2), 5(4) of the Citizenship Act; this project. Interdependencies: 
Connectivity to the IRCC validation 
portal, grants & proofs e-apps and the 
2D barcode grants application form. 
CRs submitted and awaiting 
approval/prioritization. 


Proof of Citizenship 


s.14(a) 
s.16(2) 


s.21(1)(b) 


Multiple Services 


2132; 


1466 


Multiple Services 


1470 


1471; 
1480 


1482; 


1488 


Online Account Registration and Enrolment; 
Online Authentication; 


Online Application; 
Online Decision; 
Online Issuance; 


Online Issue Resolution and Feedback 


Online Account Registration and Enrolment; 
Online Authentication; 


Online Application; 
Online Decision; 
Online Issuance; 


Online Issue Resolution and Feedback 


N/A 


Online Issuance 


Online Authentication 


Online Issuance 
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28541 


8161 


N/A 


28563 


27674 


TBD 
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iCARE must be modernized in order to make it ready 
to be integrated into IRCC's DPM efforts and to take 


advantage of current industry standards. 
iCare Modernization 


. r 7 Ability for clients to self-schedule appointments, to 
Client Facing Scheduling Raines . | 
A reduce client influx in local DN offices and to follow 
Service (CFSS) 
health and safety protocols. 


The CDOB server environment needs to be upgraded 
to be compliant with Microsoft SQL Server and to 
ensure CDOB business continuity for data 
management and reporting. CDOB servers do not 
have the appropriate server space and speed to 
support the increased volume and complexity of data. 
CDOB needs an upgraded and compliant centralized 
facility to create, store, and deliver report to unlock 
the full value of IRCC data. 


CDOB Server 
Infrastructure 
Prioritization 


The current bandwidth is not large enough to support 
upcoming cloud initiatives and business requirements 

such as social media and MS Teams. In 2020 SSC did 

Internet Bandwidth $ , 
an analysis of our bandwidth and concluded that we 
Increase x : 

needed a min of 3GBPS to support our business. In 

order to expand our bandwidth to 3GBps, we need to 

upgrade our aging technology with new equipement. 


Ability to implement an Enterprise Geographic 
GeoSpatial Tech Information System to enable advanced geospatial 


capabilities across the organization. 


Current ATIP Case management software is 
antiquated and cannot sustain the volume of 
requests anymore. 


ATIP Case Management 


Software 
A s This will be 
achieved by taking advantage of advances in 
technology to automate manual processes and 
promoting a more streamlined and efficient ATIP 
processes 
f Network stability is necessary to ensure the GCMS- 
Core Switch À i 
DR delivery to the SSC Enterprise Data Center. GCMS 
Replacement/JETS , ; 
CS outages caused by network technical debt will 
Stabilization 


decrease immensely. 


CDO 


DN 


CDO 


ITOPs 


OPPB 


ICB 


ITOps 


Chantal Goyette 


Funda Taysi; 


Elisha Kapell- Seguin 


Chantal Goyette 


Pamela Spirito 


Dan Borbey; 
Audrey White 


Pamela Spirito 


2021-22 FY; 
2022-23 FY; 
2023-24 FY 


2021-22 FY; 
2022-23 FY; 
and ongoing 


2021-22 FY 


N/A 


2021-22 FY 


2021-22 FY; 
2022-23 FY 


N/A 


On Track 


On Track 


On Track 


N/A 


Delayed 


On Track 


N/A 


Modernization 


Client Feedback; 
Online Service Availability; 
COVID-19; 
Modernization 


Other: Server Upgrades 


N/A 


Modernization 


Legislation; 
Service Standards; 
Modernization 


N/A 


Multiple Services 


Multiple Services 


Multiple Services 


N/A 


Multiple Services 


Access to Information; 


Access to Privacy Request 


N/A 


N/A 


N/A 


N/A 


This item has been removed from 
Section Ill of DPSD as it is already 
captured in Tab V by ITOps 


Currently in the Ops sector 
prioritization list 


N/A 


This item has been removed from 
Section III of DPSD as it is already 
captured in Tab V by ITOps 


Online Authentication; 
Online Application; 
Online Decision; 
Online Issue Resolution ad Feedback 


Multiple Services 


Online Authentication; 
Online Application; 
Online Decision; 
Online Issue Resolution and Feedback 


Multiple Services 


Multiple Services N/A 
N/A N/A 
Multiple Services N/A 
1514; x ane 
Online Application; 
Online Issuance 
1516 
N/A N/A 
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s.1 5(1) and Citizenship Canada et Citoyenneté Canada 
Information disclosed under the Access to Information Act 

s.20(1 )(b) L'information divulquée en vertu de la loi sur l'accès à l'information 


s.21(1)(b) 


IRCC's Remedy instance is in a limited support 
window. A software upgrade is required to ensure 
Remedy Instance continued sustainability of the system. IRCC needs to 
Upgrade retain the ability to log, track and monitor service 
requests, production incidents, IT assets, IT changes 
and releases. 


This item has been removed from 
ITOps Deborah Ingraham N/A N/A N/A N/A Section III of DPSD as it is already N/A N/A N/A 
captured in Tab V by ITOps 


Modernization; 


2019-20 FY; 
Client Support Centre Modernization of client support webform, and a ne , 7 Client Feedback; Items previously identified as non-IT 
PP ae PRESEN ms CEB Josée Beauregard 2020-21 FY; On Track i Ro Client Support Centre previ y! K 2238 Online Issue Resolution and Feedback N/A 
(CSC) Improvements email management system for the CSC (eGem). 2022-23 FY Accessibility; related. 


Other: Volume Reduction 


Remove the system requirement for a valid medical 


Eliminating 2nd 
rere for In-Canada protected persons when applying for 


2021-22 FY; This item was misidentified in the 


Immigration Medical MHB N/A N/A N/A N/A N/A N/A N/A 
er : PR for those who are deemed eligible under the new / and ongoing / / / 2021-24 DPSD as an initiative. / / / 
Examination (IME) > , 
Temporary Public Policy 
The Department’s service standards are 
commitments to a specific level of service that clients 
Multi-year Service can expect to receive under normal circumstances. . E L . n 
: h | CEB Robert Canough 2021-22 FY Delayed Service Standards Multiple Services N/A Multiple Services N/A N/A 
Standards Review Plan Our service standards reviews are based on an 
assessment of our business and what we aim to 


achieve. 


lan Gillespie 


IRM Benoit Lacombe N/A N/A N/A N/A N/A N/A N/A N/A 
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A software upgrade of the Corporate instance of 
GCDOCs Corporate GCDOCS is needed to ensure continued sustainability 
Instance Upgrade of the IRCC's corporate document management ITOPs Deborah Ingraham N/A N/A N/A N/A 


N/A N/A N/A N/A 
systems. IRCC needs to retain the ability to store and 
manage corporate documents 
Upgrade IRCC’s Azure 
DevOps (ADO) Server Upgrade is required as part of the effort to get out of 
instance from 2019 to the JETS data centre. It supports the business needs ITOPs Deborah Ingraham N/A N/A N/A N/A N/A N/A N/A N/A 
2020 of groups responsible for implementing and deploying 
Facilitative Measures To facilitate Express Entry candidates whose studies 
for Express Entry at Canadian institutions between March 2020 and 
Candidates Facing August 2022 were impacted by COVID-19-related SPPB Jonathan Joshi-Koop N/A N/A N/A N/A N/A N/A N/A N/A 
COVID-19-Related measures in meeting the eligibility criteria for 
Barriers Canadian Educational Credential points. 
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Forecasts Planned Expenditures 


2021-22 


Category 


Information Technology 


Information Technology within ClO 
Organization 


Sub-Total added by RM 


IT Expenditures are in a downward trend for the next three years mainly due to fluctuations in the funding profile for Budget 2021 announcement to Proceed with Building 
Canada’s Modern, Digital, and Data-Driven Migration System; and to the sunset of funding for stabilizing IRCC's Global Case Management System to set the foundation for future 
transformation. 


Planned Human Resources 


Department/Agenc 


Information Technology 667.02 794.35 


Immigration, Refugees Immigration, Réfugiés 


s.21(1 xi 


formation disclosed under the Access to Information Act 
s.21 (Hay ation divulguée en vertu de la loi sur l'accès à l'information 


and Citizenship Canada et Citoyenneté Canada 
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s.21(1)(d) 


Similar to expenditures, IT FTEs are also in a downward trend for the next three years mainly due to fluctuations in the funding profile for Budget 
2021 announcement to Proceed with Building Canada’s Modern, Digital, and Data-Driven Migration System; and to the sunset of funding for 
stabilizing IRCC's Global Case Management System to set the foundation for future transformation. 
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GC Investment ID* Investment Name APM App ID** 


| Legacy TBS Clarity or 


[Investment Name] IGC Application ID] [App Name] 


TDSS Application 
Maintenance - 
Mission Critical 


| IRCC-Access 


8163 
Manager/ 


Access Manager 


TDSS Application 
Maintenance - 
Mission Critical 


8163 | APP-04962 Alpha 


‘Computer 
Assisted 
Reference Tool 
‘(Call Centre) 


TDSS Application 
Maintenance - 
Mission Critical 


8163 IRCC-WebCART 


Report on Investment Progress to date 


[Investment progress to date and brief outline on how the 
investment will achieving the Target Aging IT Health score and 


_DPM Phase 1 - Cloud Disposition Assessment 

As part of DPM Phase 1, IRCC conducted a cloud application | 
disposition assessment with the business and technical owner as 
well as a cloud migration wave planning. The results of this 
assessment was Retire. This application is part of the Retirement 
Wave that is planned to run from Q2 FY 22-23 until Q4 FY 23-24 | 


DPM Phase 1 - Cloud Disposition Assessment 

As part of DPM Phase 1, IRCC conducted a cloud application 
disposition assessment with the business and technical owner as 
well as a cloud migration wave planning. The results of this 
assessment was Rehost in the EDC. This appliaction is part of the 
Wave 2, which is planned to run from Q4 FY 21-22 to Q1 FY 22- | 
23 


Note: IRCC has not allocated budget for the rehosting of this 


k Immigration, Refugees Immigration, Réfugiés 
and Citizenship Canada 


Information disclosed under the Access to Information Act 


et Citoyenneté Canada 
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Relationship 


outcomes.] 


_DPM Phase 1 - Cloud Disposition Assessment 

As part of DPM Phase 1, IRCC conducted a cloud application - 
disposition assessment with the business and technical owner as | 
well as a cloud migration wave planning. The results of this 
assessment was Refactor. The migration of this application is 
part of Group 4 (Pursue Later) which initiates mid Q1 FY 23-24. 


Supports 


Note: IRCC has not allocated budget for the refactoring of this 
application to migrate it to the cloud. 


Supports 


Note: IRCC has not allocated budget for retiring and 
decommission of this application 


Supports 


application 
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8163 


(TDSS Application 
Maintenance - 
Mission Critical 


IRCC-DMP - Dicom Digital X-ray 


Mgmt System 


Background: 

This is part of the current Panel Physician systems. The purpose 
of the tool is to provide a desktop based means for updating 
physician information. In the past, it had been used to view 
digital x-rays stored on GCdocs but this capability had been 
removed from the desktop tool and had been replaced by a 
DICOM[1] viewer; Currently it is using the data that gets 
displayed on the Panel Physician website. 


Path to Decommission/Rehost at EDC: A new system was 
developed and released in R26 to have the data source switched 
to GCMS (and pushed to Panel Physician db). This was to allow 
for the decommissioning of the desktop application; however,  : 
there were some issues with the data set that was being pushed 
from GCMS and the client decided that they would scrapthis | 
initiative in favour of some new solution (still TBD). With this 
decision, we will need to continue to support this desktop 

application. The rest of the system consists of 3 intranet 
websites for Add/Update/Delete; public Panel Physician website 
hosted at JETS with the other EISU apps and database. 


The plan is to rehost the Panel Physician at EDC. This will 
involve some effort to ensure proper installation instructions 
and some testing. 
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| Background: | 
Started in 2009, CIC/IRCC has assisted provinces in managing the 
risks associated with the implementation and delivery of the 
Enhanced Driver’s Licence (EDL). Specifically, CIC/IRCC 
implemented a quality assurance (QA) process (aka Program 


Enhanced Drivers / 
Licence SFTP | 
Windows Service | 


TDS Application 
Maintenance - 
Mission Critical 


8163 | APP-00018 


Integrity exercise) to monitor the quality of Provincial decision-  : 
«making to ensure that EDLs are issued to Canadian Citizens only. 


Path to Decommission: These Windows Services were developed 


as part of this system. There has been no activity with this 
system since it was transferred to us with the rest of EISU. 


The plan is to complete the decommissioning activities but will 


require support from Management to move this along. 


DPM Phase 1 Assessment 


TDSS Application 
Maintenance - 
Mission Critical 


Remedy Action 


8163 
Request System 


IRCC-ARS 


As part of DPM Phase 1, IRCC conducted a cloud application : 
disposition assessment with the business and technical owner as 
well as a cloud migration wave planning. The results of this 
assessment was Rehost in the EDC. This application is in-flight to 
be rehosted in an EDC 


Supports 


SAS is used for the IRCC Cost Management exercises. IRCC will 


|SAS - Cost and 
Profitability 
‘Management 


TDSS Application 
Maintenance - 
Mission Critical 


8163 IRCC-PPTC-0016 


iplicable to SSC Partners only 
able to Departments in APM only 


Note: IRCC has not allocated budget to re-host this appliaction 


need to conduct a cloud application disposition assessment with 
the business and technical owner as well as a cloud migration 
wave planning. The results of this assessment will identify where 
to re-host SAS (EDC or Cloud). : 


Supports 
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[Year and Quarter the | 


[Identify the 
Datacentre] 


[Briefly describe the migration status (on target, slipping or at risk), the scope of the migration, the overall estimated costs, and timelines for completion. Identify any 


datacentre will be a 
. impeding barriers to success.] 


decommissioned] 


Milestones/Achievements 
Core of GCMS production and staging environment have been migrated to EDC (Barrie) . 
Disaster Recovery site stood up in Gatineau 


Application Migration Factory has been defined and notional application wave planning completed as part DPM Phase 1. 


Risks 

Dev and Test environments of GCMS are still in legacy DC. 

Other Corporate applications (GCdocs, Enterprise Data Warehouse, SAP, Biometrics (CIBIDS), IRCC Internet, Government of Canada Secure Remote Access, etc.) 
situated in the legacy JETS DC. 

IRCC has no funding for the Application Migration Factory to migrate applications from JETS to the cloud, in EDC or into retirement. The estimated cost of migrating 
and/or retiring the applications is ~S90M with a rough order magnitude (ROM). There are ~185 applications in the JETS DC 


JETS 2026 Q4 


Notes: 
IRCC can extend the lease for JETS until 2030 Q4. 2026 Q4 reflects the date that the equipment expires for the backbone and would require a refresh. 
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5,500 users are not assigned a cellular device or cellular plan 


Applies to all users 


175 |users require access to GC Secret Network 


GC Office User 


Remote/Field users will receive rugged laptops 
Remote/Field users require a high data plan 
Remote/Field users are assigned additional digital identities or third party credentials. 


Remote/Field User 


Call Centre User 


400 {High-Security Users require desktops, due to security restrictions. 
High-security User O  |High-Security Users have restricted use camera, microphone, and Wi-Fi. 
0 High-Security Users have restricted SRA access. 


Policing/Enforcement/Intelligence Users will receive rugged laptops. 
Policing/Enforcement/Intelligence User 


Policing/Enforcement/Intelligence Users require high data plan 


Scientist / Lab User Scientist/Lab Users require high-performance laptops. 
Data Scientist / Analyst 100 |Data Scientist/Analysts require high-performance laptops. 


Software Developer / Power User / Graphics Designer Software Developer/Power Users/Graphics Designers require high-performance laptops. 


International Users require additional long-distance features. 
International User 
International Users are assigned additional digital identities or third party credentials. 


12140 TOTAL USER PROFILE COUNT 


000021 


Immigration, Refugees Immigration, Réfugiés 
i de i and Citizenship Canada et Citoyenneté Canada 
Information disclosed under the Access to Information Act 
L'information divulquée en vertu de la loi sur l'accès à l'information 


Generic Workpoints (with Wi-Fi Networking) 


Fixed-Line Workpoints 550 |Fixed-Line workpoints require fixed Telephony. 


High-Security Workpoints High-Security workpoints require fixed Telephony. 
High-Bandwidth Workpoints 
Small Workspace (small work area with zero or one 
monitor) 


Phone Booth (small area with fixed telephony 
connection) 


14400 TOTAL WORKPOINT PROFILE COUNT 


000022 


Provision 


Collaboration 
Services 


Telephony 
‘Se rvices —— si 


otal Number of Personal Email Inboxes on 0365 


‘Email Services 


xpenditures to be spent on cloud contracts through : 
the SSC cloud brokering service — not including n/a! 
brokerage fees 


brokering 


CSI Accounts 175 Active accounts reduced due to COVID 
Issued/On line 
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Planned Demand Units (Service Demand) : 
ne ne SEBS RSE EE USES eee eree re 3 ye ar t ar E et : Pro g ress T owar d s G oa i 
2022-2023 2023-2024 2024-2025 : 


Planned Demand Type GC Investment ID(s)* Investment Name(s 


No ID based on TBS 
wanting only Corp 
business Apps 
registered in Clarity 


Microsoft 0365 E5 licences N/A 1600 11760 | IRCC is expected to hire 4K net new FTE's in 2022-23 and 


_IRCC may need to increase the ES procurement above the 6,000 anticipated to accommodate this net new increase. 


No ID based on TBS 
wanting only Corp 
business Apps 
registered in Clarity 


at least 


Mi ft Offi -N f Acti : 
icrosoft Office 365 umber of Active Users 13200 


N/A 2000 2000 


ollaboration Services 


No ID based on TBS 
wanting only Corp 
business Apps 
registered in Clarity 


150 estimated and IRCC plans for all new installations to be MS Teams certified with a gradual phased out of uncertified devices. IRCC is 


-50 150 
: - planning complete implementation of CVI for MS Teams in March 2022. 


Non MS Teams certified VC endpoints N/A 


: No ID based on TBS 
Active Legacy Audio/Video/Web Conferencing wanting only Corp 
Account Plans business Apps 
registered in Clarity 


| : :IRCC currently has 2,425 WebEx accounts in use and the department is expecting to grow 30/10/10% over the next 3 years. Growth is 
-1500 -1400 "2500 planned for next fiscal with a phased out approach of WebEx usage over the 2023-24 and 2024-24 with the migration of WebEx services 
| . to MS Teams. 


| 28897 pe SSC Cut the : Le ae IRCC currently has 16330 fixed lines which includes both Centrex and VoIP services. IRCC is currently implementing Phase 1 of the Fixed Line Reduction 
Fixed Line Plans (Centrex and VOIP phones) _ TDSS: SSC — c d : -6000 -1930 D ‘project. IRCC is planning to reduce Centrex & VolP fixed lines by 5000 (2022-23), 6000 (2023-24) and 1930 (2024-25) respectively. Residual count of 
: “Communicating OF : : 0 _remaining fixed lines at IRCC is expected to be 3400. Phase 1 (Centrex) of the FLR project is expected to be completed in Q1 of FY 2022. 


28897 
VolP Plans (Soft Phone) _TDSS: SSC- 
: Communicating 


IRCC is looking to implement MS Teams PSTN soft phone to support Cut the Cord initiative and 
progresses in reducing Centrex and VolP fixed lines. IRCC is estimating a total target to be approximately 3,800 over FY 2022 to 2025. 


TDSS: SSC Cut the 


950 950 13200 
Cord : 


elephony Services 


| Lo TDSS: Enterprise : = ae IRCC currently has 7,000~ mobile plans in service. To provision a device to the remaining employees and to meet the FTE growth of 4,000 
Mobile Plans Mobile Device 2000 2000 ie FTE's in 2022-23, IRCC is expecting to need 9,000 additional devicces to meet the demand. In addition to meeting departmental growth 
| Management : : needs and to support Cut the Cord activities, IRCC is planning to increase mobile plans by 9,000 in 2022-23. 
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ee eal Sed 


at most 
13200 


TDSS: SSC - 
Communicating 


dividual accounts - Office 365 


1000 


mail Services 


Lose. Passport upgrading its Exchange environment from 2013 to 2016 and migrating users. The project is expected to completed by the end of the 

Medium n Email calendar year. In prepartion of the M365 project, IRCC has implemented the M365 GC security guardrails. IRCC is a Wave 3 partner 

ee | : : : department for M365 onboarding and IRCC held initial data gathering sessions with SSC in January 2022. Once the assessments have 

‘Enhancement Project: : : i - : | 

(MEEP) - i : i been completed, IRCC and SSC will establish the M365 schedule for onboarding IRCC. In parallel, IRCC is looking to implement 2FA as 

: : : . part of the requirements for full federation and onboarding for M365. Completion of M365 onboarding and email migration is expected 
‘to be completed by fiscal 2025-26. 


dividual accounts - Legacy 


ee : - / i Next year we will spend S4M + 20% each year and this will jump when JETS is decommissioned and a large % of the applications are 
no Da He Fa S bd Seni: 1, neo 056 1, 86 066 > 600.000 : _migrated to the cloud (+80M). Please note that the numbers DO NOT INCLUDE the 10% SSC Cloud Brokering fees. 
e 7 se a ess . Credits : This year we bought 5.7M in Credits with AWS, Azure and Salesforce this year 2021-2022 — including 10% SSC Cloud Brokering 


luding brok f : 
cluding brokerage fees ‘fees. 


TDSS: GCSI - 


CSI Accounts Government of : 1350 GCSI accounts have been assigned to users required to process, generate and store classified information up to and including Secret 
: Canada Secret - _ : - The plan for 2022-23 is to assign an additional 105 accounts to bring the total up to 455. 
Infrastructure : 

C Secret infrastructure 
TDSS: GCSI - 
Government of 
Canada Secret 
Infrastructure 


(250 GCSI terminals are currently installed across the country. The plan for 2022-23 is to complete installations at the two remaining 
locations in Gatineau, Tremblay and Colonnade as well as provide additional terminals in existing locations bringing the total number of 
‘terminals up to 358. 


Definition of the metrics 
can be found here: https://gccollab.ca/file/download/6624356 


* Applicable to SSC Partners only 
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If applicable, identify the ID of the Investment(s) | 


yber Security Maturity : Rationale from TBS Clarity or EPM used to support the Resources : Reference 


‘Cyber security maturity score : [ID of the Investment(s) from TBS Clarity or EPM Cyber Security Maturity Self- Directive on Service and Digital, Section 4.4.4.1 


‘used to support the Cyber Security Improvement] Assessment Tool 


: departmental Cyber Security Event Management Plan (CSEMP) has been established with clea :No ‘In Progress / development [ID of the Investment(s) from TBS Clarity or EPM : Directive on Service and Digital, Section 4.4.4.2 
‘roles and responsibilities. : | ‘used to support the Cyber Security Improvement] | : 


[ID of the Investment(s) from TBS Clarity or EPM = Departmental CSEMP Template Directive on Service and Digital, Section 4.4.4. D 
‘used to support the Cyber Security Improvement] : : 


: he ‘department CSEMP i is tested at ‘regular intervals (i.e. at least once every year). ‘Pending Approval of the CSEMP 


_[ID of the Investment(s) from TBS Clarity or EPM Patch Management Guidance Directive o on n Service and Digital, ‘Section 4.4. 4. O — 
‘used to support the Cyber Security Improvement] : : 


Departmental Patch Management Plan has been ‘approved, including emergency ‘patch {We have an informal process leveraging, 


management procedures. pending CSEMP development. 


-We have an informal process leveraging, : [ID of the Investment(s) from TBS Clarity or EPM ‘Privacy Breach Toolkit 
‘pending CSEMP development. ‘used to support the Cyber Security Improvement] : 


‘A Privacy Breach Protocol has been developed and approved. Directive on Service and Digital, Section 4.4.4.4 


ecure Baseline Configurations 


‘All endpoint and portable devices are protected through the use of appropriate encryption [If no, please provide rationale] [ID of the Investment(s) from TBS Clarity or EPM 


: : Appendix G: Standard on Enterprise IT Service Common Configurations - Portable : 
‘used to support the Cyber Security Improvement] : : 


Data Storage Requirements 


safeguards, including full-disk encryption. 


[ID of the Investment(s) from TBS Clarity or EPM. : 
used to support the Cyber Security Improvement] : 


‘Endpoints are protected against both known and unknown On-device reputational site-filtering: _[If no, please provide rationale] : Appendix G: Standard on Enterprise IT Service Common Configurations - Endpoint : 


malicious activity with appropriate host-based protections. and malware detection software Management Configuration Requirements 


host firewall to limit both 


[ID of the Investment(s) from TBS Clarity or EPM : 
used to support the Cyber Security Improvement] : 


“Network firewall filltering is achieved over VPN 


“inbound and outbound network connectivity. 


onnections. 


[If no, please provide rationale] 


[ID of the Investment(s) from TBS Clarity or EPM = 
used to support the Cyber Security Improvement] : 


-Cyber defense security services th 
detect and respond to anomalous 
‘behaviour such as those offered 

through CCCS host-based sensors 


‘Endpoints implement standard operating environment -Windows 10 Baseline Configuration : [If no, please provide rationale] : [ID of the Investment(s) from TBS Clarity or EPM -Direction on Windows 10 Desktop 
‘baselines. used to support the Cyber Security Improvement] Operating System Migration and Management Configuration Requirements 
: . : : : ‘Configu ration : IT Policy | 
‘Implementation Notice (ITPIN) 


:Appendix G: Standard on Enterprise IT Service Common Configurations - Endpoint : 


[ID of the Investment(s) from TBS Clarity or EPM 
‘used to support the Cyber Security Improvement] : 


C Server Baseline Configuration 


ndpoints are managed using centralized endpoint management solutions. [If no, please provide rationale] [ID of the Investment(s) from TBS Clarity or EPM ppendix G: Standard on Enterprise IT Service Common Configurations - Endpoin 


‘used to support the Cyber Security Improvement] : Management Configuration Requirements 


: raffic to/from the internet must flow through the GC approved pathways to the internet, rather: 
‘than via a direct connection to the internet, in order to leverage the Canadian Centre for Cyber : 
ecurity’s (CCCS) Cyber Defences. 
‘Direct internet access is not made available outside of the GC’s managed internet gateways (e.g.,: 
‘additional access points are established). 


: [ID of the Investment(s) from TBS Clarity or EPM 


: _ Appendix G: Standard on Enterprise IT Service Common Configurations - “Endpoin f 
‘used to support the Cyber Security Improvement] : : 


[If no, please provide rationale] 
Management Configuration Requirements 


[If no, please provide rationale] 


: [ID of the Investment(s) from TBS Clarity or EPM : 
‘used to support the Cyber Security Improvement] : 


Appendix G: Standard on Enterprise IT Service Common Configurations - -Endpoin : 
Management Configuration Requirements : 


_[ID of the Investment(s) from TBS Clarity or EPM ‘GC Event Logging Guidance 
‘used to support the Cyber Security Improvement] : “Management Configuration Requirements 


: Appendix G: Standard on Enterprise IT Service Common Configurations - Endpoint | 


‘Event logs are forwarded to a centralized security event 


: ‘SIEM Project plan is under development 
sand information log system. : 


Cloud based SIEM pilot planning is currently 
‘under development. 


_[ID of the Investment(s) from TBS Clarity or EPM 


: Appendix G: Standard on Enterprise IT Service Common Configurations - Remote 
‘used to support the Cyber Security Improvement] | Access Configuration Requirements 
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‘Cloud based SIEM pilot planning is currently 
‘under development. 


[ID of the Investment(s) from TBS Clarity or EPM 
‘used to support the Cyber Security Improvement] : 


Non-SSC managed Servers 


e Investment(s) from arity or 
‘used to support the Cyber Security Improvement] : 


programs and Services. no, please provide rationale 


Enterprise authentication services are leveraged. 


xternal Credential Management 


[If no, please provide rationale] ID of the Investment(s) from TBS Clarity or EPM 
ervices (e.g. GCKey, Credential : ‘used to support the Cyber Security Improvement] : 
roker Services, Sign-in Canada : : : 
roker Platform) 


nternal Credential Management 
ervices (e.g. Gcpass, DCAM) 


[ID of the Investment(s) from TBS Clarity or EPM 


[If no, please provide rationale] : 
: ‘used to support the Cyber Security Improvement] : 


ppendix G: 
: Management Configuration Requirements 


Il privileged users performing 
rivileged actions 


‘This is currently being done only in the Cloud 
‘based services. 


: [ID of the Investment(s) from TBS Clarity or EPM  : 
‘used to support the Cyber Security Improvement] : 


: [ID of the Investment(s) from TBS Clarity or EPM : 
‘used to support the Cyber Security Improvement] : 


of the Investment(s) from arity or 
‘used to support the Cyber Security Improvement] : 


currently support this requirement on IRCC 
endpoints (standard users). 


The departmental password policy aligns with the recommendations from the GC Password 
Guidance, including establishing a no password expiry configuration. 


Where single sign on is leveraged at IRCC, a full 
‘impact assessment is required. 


ID of the Investment(s) from TBS Clarity or EPM 
used to support the Cyber Security Improvement] : 


ppendix G: Standard on Enterprise IT Service Common Configurations - Account 
Management Configuration Requirements 


‘Secure remote access services are implemented and 
“configured. 


entrally managed remote access : -IRCC endpoints do utilize SSC VPN services. ID of the Investment(s) from TBS Clarity or EPM 
ervices such as those available | _PPT endpoints connect through secure VPN 
rom SSC are leveraged. i 


ppendix G: Standard on Enterprise IT Service Common Configurations - Remote | 


used to support the Cyber Security Improvement] Access Configuration Requirements 
“services with MFA managed by PPT. : : 


ll traffic is encapsulated from 


IRCC endpoints do utilize SSC VPN services. 
managed endpoint devices through : PPT endpoints connect through secure VPN 
orced remote access services with MFA managed by PPT. 
onfigurations. : 


ID of the Investment(s) from TBS Clarity or EPM  : 
used to support the Cyber Security Improvement] : 


-All websites and web services are configured to provide 
‘service only through a secure connection. 


ublicly-accessible websites 


“https://tracker.canada.ca 


[If not implemented, please provide rationale] ; [ID of the Investment(s) from TBS Clarity or EPM 


used to support the Cyber Security Improvement] : 


-Appendix G: Standard on Enterprise IT Service Common Configurations - Web 
_sites and services hardening 


nternal Departmental Production ¿No 
websites : 


‘Review is under way 


[ID of the Investment(s) from TBS Clarity or EPM : 
‘used to support the Cyber Security Improvement] : 


‘Email domains are protected. 


[ID of the Investment(s) from TBS Clarity or EPM _https://tracker.canada.ca/ 


‘used to support the Cyber Security Improvement] : 


: Appendix G: Standard on Enterprise IT Service Common Configurations - Email 
: Management Configuration Requirements 


‘SSC Responsibility 


omains and sub-domains owne y are reporte 


‘service, including up-to-date business and technical contact information. 


e Investment(s) from arity or ppendix G: Standard on Enterprise 
‘used to support the Cyber Security Improvement] : Name System (DNS) Services Management Configuration Requirements 


SSC Responsibility 


[ID of the Investment(s) from TBS Clarity or EPM 
‘used to support the Cyber Security Improvement] : Name System (DNS) Services Management Configuration Requirements 


: [ID of the Investment(s) from TBS Clarity or EPM  : 
‘used to support the Cyber Security Improvement] : 


Appendix G: Standard on Enterprise IT Service Common Configurations - System 


‘Back-ups are stored in an encrypted state and access is restricted to only those who must access : [Yes/No] -SSC Responsibility : 
- : : Management Configuration Requirements 


‘them for testing or restoration activities. 
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ppendix G: Standard on Enterprise IT Service Common Configurations - System 
Management Configuration Requirements 


estoration from backups is tested at regular intervals (i.e. at least once every year) and the : [Yes/No] 
estoration test achieved the defined recovery time objective (RTO) and recovery point objective 
RPO). E 


SC lead responsibility with departments. D of the Investment(s) from TBS Clarity or EPM 


sed to support the Cyber Security Improvement] 
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If Applicable, List Specific 
Investment IDs That Will | 
ither Attain Compliance, or 

Maintain It 


If Applicable, Identify Any New Roles Added in : 
Comments Section II That Support The Aligned 
: Information/Data Management Measure(s) 


Aligned Information/Data Managemen 
: Measure(s) 


Capability DOSP Priority DOSP Action 


:3.2 Plan and govern for the 
sustainable and integrated 
management of digital services, 
‘information, data, IT, and cyber 


3.2.2. Providing decision-makers with ‘Does the institution plan and govern for the 
horizontal visibility for the integrated sustainable and integrated management of 
management of services, IT, information, service, information, data, IT and 

data and cyber security cybersecurity? 


‘Does your institution have clearly defined 
individual and committee roles, 

responsibilities, and accountabilities in place 
for information and data management? 


hief Information Officer participates in GC CIO 
ouncil 


3.11 Establishing governance, roles and 

responsibilities for strategic management of | 

‘government data and information assets Do any of the individual or committee roles, 

: responsibilities, and accountabilities in place 
for information and data management 
support government-wide information and 

data governance? 


Chief Information Officer participates in GC ClO 


31 Manage and use data and - 
Council 


‘information as strategic assets 


hief Information Officer participates in ADM 
ervice and Enterprise Priorities (ADM SEP) 
ommittee 


Chief Information Officer participates in ADM Service: 
and Enterprise Priorities (ADM SEP) Committee 


Chief Data Officer participates in Departmental Data : 
Leads 


hief Data Officer participates in Departmental 
ata Leads 


- 2.2.1 Defining and using enterprise standards 
2.2 Maximize public value of data for data accessibility, exchange and reuse 
and information while protecting privacy and personal 
information 


Does the institution have a standardized 
_metadata scheme (taxonomy/classification 
_scheme/vocabulary)? 


RCC makes use of standardized metadata 
chemes - both ones specific to IRCC and those 
rom external sources. 


‘Does the institution ensure the automatic 
application of metadata within its systems? 


ccess, sharing and | 


3.1.2. Building and using a common data 


euse . : RCC has inventories of some information and 
13.1 Manage and use data and reference model and an inventory of Does your institution have an inventory of l . 
information as strategic assets information and data assets that could be ata assets but not a single comprehensive 
/ ‘government data assets | ventory that covers all assets in the 


‘used to inform the establishment of an 
inventory of government-wide information 
sand data assets? 


rganization. Work in 2022-23 includes 
ventorying data across all systems as well as 
he information holdings within those systems. 
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Retention and disposition functions outside 
standard EDRM systems were not consideration 
when most IRCC systems were procured or 
developed. GCdocs is the only system in 
production with built-in functionality to manage 
the retention and disposition of information. 


Retention and 2.2.1 Defining and using enterprise standards Are the institution's systems enabled to 
disposition of 2.2 Maximize public value of data for data accessibility, exchange and reuse consistently manage the retention and 
information and and information while protecting privacy and personal disposition of information and data in a 
data information controlled, systematic and auditable way? 
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engage IRCC leaders in various areas to develop an Accessibility plan, engage management and employees and promote the 
plan. The areas of interest include, Accommodation, IT and HR. 


1-A new team has been created at IRCC, the Employee Support Office (ESO), their leader is Robyn Holland-Ayoub. The ESO's 
role and priority this year is to identify and put in place processes that will ensure employees have access to a simple 
(facilitated) and timely implementation of their accommodation solutions. 


2-HRB (Aaron Feniak's team) will be playing a role in the development of the Accessibility file (reviewing HR processes which 
includes the promotion of creating and using accessibility pools of qualified employees). HRB will also create a dashboard for 
reporting pusposes (DM). 


3-The Accommodation team in ASA lead by Jean-Nicolas Pouliot, hold frequent consultations with management to discuss and 
review space requirements which incorprates the accessibility angle. The Accommodation team is in constant communication 
with their partners at PSPC to ensure all accessibility changes or new mandates are implemented such as the universal 
washrooms. 


ccessibility Steering Committee 


4- ASA has hired an Accessibility specialist (consultant) to assist the Accessibility Steering Committee in "packaging" IRCC's 
Accessibility Plan as well as engaging change management messaging to ensure we deliver the plan successfully across the 
department. 


5-Information Technology (IT) will be looking at leveraging current tools as well as new tools to facilitate the technological 
aspects of employees needing accessible tools to be able to perform their duties barrier free. 


6-Client Experience Branch — continues to look at improving services to our clients. 
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Notes: In accordance with the Accessibility Canada Act, federal government departments, agencies and Crown corporations are to publish initial accessibility plans by December 31, 2022. TBS will 
launch a Scorecard for Accessible ICT Maturity in 2022. The next iteration of the DPSD will require departments to list priorities from accessibility plans and to submit a maturity score based on 
the Scorecard self-assessment. 
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s.21(1)(b) 


Annex B 

Summary of IRCC’s Departmental Plan for Service and Digital 2022-2025 
Tab 1 contains the instructions. 
Section I is the approval tab for the Deputy Minister. 


Section IT is a list of key contacts in Immigration, Refugees and Citizenship Canada 
(RCC). 


Section III outlines IRCC’s Service Improvement Priorities over the next three years. It 
itemizes IRCC service improvement priorities (IT and non-IT initiatives) that may relate 
to priorities noted in the 2021-2024 Digital Operations Strategic Plan, the three themes of 
the Service Management Improvement Initiative (client feedback, service standards, 
service reviews), broader government priorities, mandate commitments, implementing 
the requirements of the Policy on Service and Digital, or other relevant priorities, as per 
Treasury Board Secretariat (TBS) guidance. 


Section IV provides a global view of the Departmental total spending plans based 
on total authorities available to the department stemming from the 2022-23 
Departmental Plan. It also identifies financial and human resources destined to 
IM/IT activities across the department, and provides the planned IM/IT resources 
that are under the CIO’s responsibility. As these plans are based on currently 
available information, they will evolve in time to reflect the outcomes of the IT 
prioritization and capacity exercises as well as the completion of the GCMS 
releases content release. TBS seeks this information to assess the amount of 
resources it takes to support IT and service efforts across comparable departments, 
which also assists with TBS’s future planning. 


Section V provides an overview of IRCC’s aging IT applications and the Department’s 
sustainability plans to address this through transformation, workload migration and/or 
retirement of the application. The list of aging IT applications is based on IRCC’s 
application portfolio management (APM) information contained in the TBS APM Clarity 
portal. The health of department’s application portfolio is reported annually as part of the 
Management Accountability Framework, for which IRCC has a positive rating of “high”. 
Except for Remedy being re-hosted to an EDC, IRCC has not allocated budget to retire or 
re-host to an EDC or Cloud the remain aging IT application. 


This section also outlines IRCC’s plans and progress for Workload Migration (WLM). 
IRCC’s WLM is being addressed as part of the GCMS Disaster Recovery and JETS 


decommissioning initiatives. To provide departments with better TBS and SSC support 
during their WLM activities, TBS requested a brief overview of IRCC’s plans to address 


Section VI (a & b) 
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CONFIDENTIAL 


The GC Profile Template identifies IRCC’s IT service needs (1.e., desktop computing, 
telephony, Wi-Fi, internet access, etc.) based on the GC IT User Profile standards. The 
profiles work in two dimensions, user profiles (VIa) and work point profiles (VIb), 
which bundles each user to a work point based on their job function. Given the number of 
IRCC employees working remotely due to COVID and the move towards ABW 
workspaces, the ratio of users to work points should be greater than 1:1. However, IRCC 
will be growing by 4k or 5k FTE’s in 2022/23 and as such, three new buildings were 
brought online hence the higher than 1:1 ratio. 


Section VII s.16(2)(c) 
Building on the IRCC’s GC Profile in Section VI, this section compares IRCC’s results 2446) 
against the GC’s compliance targets. IRCC has detailed the amounts it anticipates for 

growth or reduction for each service metric over 3 years as a demonstration of meeting 
compliancy objectives. This also helps Shared Services Canada (SSC) plan for IRCC’s 

demand for IT services. IRCC has initiated a “Cut the Cord” project in support of 

improving the Department’s compliance to the telephony and mobile device 

targets. Additionally, IRCC has most recently started discussions with SSC in January 

2022 regarding the onboarding of M365 services. To note that IRCC will be growing by 

over 30% and as such, there is large growth of +4,000 FTE’s planned for fiscal year 

2022/23. The anticipated FTE growth for remaining two fiscal years (2023/24 and 24/25) 

were estimated to be 10% per year similar to the yearly departmental growth over the 

past 5 years. 


Section VIII 


Section IX — Information Management 
The questions in the IM tab are focused on IM and Data Governance and on elements of 
the new Standard on Systems that Manage Information (pending approval). Similar to the 
question in that most recent round of MAF, these appear to be baselining questions. The 
metadata and disposition questions ask about the Department and its systems overall. At a 
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= Bic 
CONFIDENTIAL 


recent IM Leaders forum, the TBS IM team indicated that the intent is to apply the new 
standard on systems that manage information on new systems being built or procured, not 
on legacy systems currently in place. This issue is being worked out within TBS OCIO. 
The alternative would be to retrofit all existing systems within the GC for very 
specialized functionality. 


Section X — Accessibility 

TBS mandated the implementation of the Accessibility Strategy within the Public Service 
by December 2022. The Accessibility tab provides a description of the Accessibility Plan, 
which encompasses IRCC’s work to date to improve accessibility for both employees and 
clients. 
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